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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.1 14, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 

1 0/30/2007 has been entered. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1, 3-6, 8-18, 20-23, 25-35, 37-40 and 42-51 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Bots et al. U.S. Patent Number: 6,226,748 B1 
(hereinafter referred to as "Bote") and Pandya et al. U.S. Patent Number: 6,671,724 B1 
(hereinafter referred to as "Pandya") and further in view of Li U.S. Patent Number: 
6,751,220 B1 (hereinafter "LA) 

4. Referring to claims 1,18, 35, Bots teaches a group management system 
comprising: a plurality of interconnected nodes [see figure 2 - elements 201-203, 211- 
213, 221-223, 331-332] communicatively coupled with each other as member nodes of 
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a virtual private network ("VPN") [see figure 2 - element 'VPNU' and column 2 - lines 
36-67 and column 3, lines 1-7] wherein all communications between said 
interconnected nodes are encrypted [see column 2, lines 55-62, to insure secure data 
communication between members of the same VPN group, when packets are to be sent 
between member of the group, encryption and authentication are used]; and a plurality 
of master nodes, different from the plurality of interconnected nodes [see figure 2 - 
element 'VPNU'], each of the master nodes controlling membership in the VPN for an 
associated non-empty subset of the member nodes [see column 3 - lines 8-22] and 
further facilitating said communications between said plurality of interconnected nodes 
[see column 6 - lines 37-52] wherein a membership change in at least one of the 
subsets can be performed without notifying all of the master nodes not associated with 
the changed subset [see Bots column 2 - lines 36-67 and column 3, lines 1-7.] Bots 
does not set forth the limitation of wherein in the event one of the master nodes fails, 
the associated subset of member nodes will be automatically reassigned to one or more 
other of the master nodes however, Pandya teaches this limitation [see Pandya column 
7, lines 11-57, 'one or more back up control points that will assume primary control 1 ] in 
order to avoid catastrophic network failure. 

One of ordinary skill in the art at the time of applicant's invention would have 
clearly recognized that it is quite advantageous for the system of Bots to have a backup 
master node that will assume control in an event of primary master node's failure, in 
order to avoid catastrophic network failure. It is for this reason that one of ordinary skill 
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in the art would have been motivated to implement Bote's system with a backup master 
node in order to avoid catastrophic network failure. 

Bote does not set forth the limitation wherein all communication between said 
interconnected nodes are encrypted by said interconnected nodes, however Li teaches 
this limitation [see Li column 1 , lines 36-42] in order to ensure the privacy of the VPN 
transmissions. 

One of ordinary skill in the art at the time of applicant's invention would have 
clearly recognized that it is quite advantageous for the system of Li to ensure that all 
communication between said interconnected nodes are encrypted by said 
interconnected nodes in order to ensure the privacy of the VPN transmissions. It is for 
this reason that one of ordinary skill in the art would have been motivated to implement 
Bote's system the limitation of wherein all communication between said interconnected 
nodes are encrypted by said interconnected nodes in order to ensure the privacy of the 
VPN transmissions. 

5. Referring to claims 3,20, 37, the combination of Bote, Pandya and L/„ teaches 
the system wherein at least two of the subsets do not share any member nodes in 
common [see Bote figure 2 - elements 201-203, 211-213, 221-223, 331-332.] 

6. Referring to claims 4, 21, 38, the combination of Bote, Pandya and L/„ teaches 
a group management system however fails to set forth the limitation of the system 
wherein at least two of the subsets share at least one member node in common. 
Pandya teaches the above stated limitations [see column 7 - lines 3-39; column 6 - 
lines 39-59.] One of ordinary skill in the art at the time of applicant's invention would 
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have clearly recognized that it is quite advantageous for the system of Bots to have at 
least two of subsets share at least one member node in common in order to provide an 
alternate routing path. It is for this reason that one or ordinary skill in the art would have 
. been motivated to implement Bots's system with at least two of subsets share at least 
one member node in common in order to provide an alternate routing path. 

7. Referring to claims 5, 22, 39, the combination of Bots, Pandya and Li„ teaches 
the system wherein a communication involving said common member node can be 
transmitted along multiple paths [see Pandya column 7 - lines 3-39; column 6 - lines 
39-59.] 

8. Referring to claims 6, 23, 40, the combination of Bots, Pandya and Li, teaches 
the system further comprising an intrusion detection mechanism that receives said 
multiple-path communication as input [see Pandya column 7 - lines 3-39; column 6 - 
lines 39-59.] 

9. Referring to claims 8, 25, 42, the combination of Bots, Pandya and Li,, teaches 
the system wherein each of the member nodes is associated with at least one of the 
master nodes as a back-up master [see column 7 - lines 3-39; column 6 - lines 39-59.] 

10. Referring to claims 9, 26, 43, the combination of Bots, Pandya and Li,, teaches 
the system wherein the plurality of interconnected nodes are communicatively coupled 
as part of a peer-to-peer network [see Pandya column 6 - lines 26-35; column 10 - 
lines 12-15.] 
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1 1 . Referring to claims 10, 27, 44, the combination of Bote, Pandya and L/„ 
teaches the system wherein the plurality of master nodes are part of an edge-based 
content delivery network [see Pandya column 6 - lines 26-35.] 

12. Referring to claims 11, 28, 45, the combination of Bote, Pandya and L/„ 
teaches the system wherein the member nodes are allocated to the subsets at least 
partly based upon one or more criteria of connectivity between each of the member 
nodes and the corresponding master nodes [see Pandya column 4 - lines 22-46; 
column 6 - lines 26-35.] 

13. Referring to claims 12, 29, 46, the combination of Bote, Pandya and L/„ 
teaches the system wherein the connectivity criteria are selected from a group of criteria 
comprising geographical distance, topological distance, bandwidth, latency, jitter, 
financial cost, and political boundaries [see Pandya column 8 - lines 47-67; column 9 - 
lines 1-13.] 

14. Referring to claims 13, 30, 47, the combination of Bote, Pandya and L/„ 
teaches the system wherein at least one of the master nodes further controls 
membership in another virtual overlay group different from the VPN [see Pandya 
column 7 - lines 3-39; column 6 - lines 39-59.] 

15. Referring to claims 14, 31, 48, the combination of Bote, Pandya and Li, teaches 
the system of wherein an encryption key is used for communication [see Pandya 
column 9 - lines 50-65; column 10 - lines 52-65] however, does not set forth the 
limitation of the system of wherein a communication from a first one of the subsets of 
the member nodes uses a first encryption key, and a communication from a second one 
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of the subsets uses a second encryption key that is different from the first encryption 
key. It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention that it was old and well known in the computer networking art to 
get the advantage of secure data transmission by providing each unit/subset with it's 
own encryption key. It would have been obvious to one or ordinary skill in the art at the 
time of applicant's invention to use two separate encryption keys for both of the subsets, 
to get this advantage. 

16. Referring to claims 15, 32, 49, the combination of Bots, Pandya and L/„ 
teaches the system of wherein an encryption key is used for communication [see 
Pandya column 9 - lines 50-65; column 10 - lines 52-65] however, does not set forth 
the limitation of the system wherein one or more of the master nodes are operable to 
translate between the encryption keys. It would have been obvious to one of ordinary 
skill in the art at the time of applicant's invention that it was old and well known in the 
computer networking art to get the advantage of allowing devices connected to two 
different subsets to communicate with each other by providing a master node with an 
encryption key translator. It would have been obvious to one or ordinary skill in the art at 
the time of applicant's invention to use encryption key translator to achieve this 
advantage. 

17. Referring to claims 16, 33, 50, the combination of Bots, Pandya and L/„ 
teaches the system of wherein an encryption key is used for communication [see 
Pandya column 9 - lines 50-65; column 10 - lines 52-65] however, does not set forth 
the limitation of the system wherein a communication from a first one of the subsets of 
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the member nodes and a communication from a second one of the subsets of the 
member nodes both use the same encryption key. It would have been obvious to one of 
ordinary skill in the art at the time of applicant's invention that it was old and well known 
in the computer networking art to get the advantage of saving resources by using same 
encryption key to communicate with a device that is being shared between two different 
subsets of the member nodes. It would have been obvious to one or ordinary skill in the 
art at the time of applicant's invention to use same encryption key to achieve this 
advantage. 

18. Referring to claims 17, 34, 51, the combination of Bots, Pandya and L/„ 
teaches the system wherein at least one of the master nodes are operable to remotely 
install software communication mechanisms for a new member node of the VPN without 
the necessity of installing augmented hardware for the new member node [see Pandya 
column 4 - lines 30-61; column 6 - lines 60-67; column 7 - lines 1-10.] 

Response to Arguments 

19. Applicant's arguments filed 10/30/2007 have been fully considered but they are 
not persuasive. The applicant argues that Bots does not teach the limitation of wherein 
a membership change in at least one of the subsets can be performed without notifying 
all of the master nodes not associated with the changed subset, see pages numbered 
10-14 of the remarks section. 
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The examiner respectfully disagrees with this argument. Bots teaches the 
limitation of wherein a membership change in at least one of the subsets can be 
performed without notifying all of the master nodes not associated with the changed 
subset [see Bots column 2 - lines 36-67 and column 3, lines 1-7.] The each of the 
dedicated VPN units, i.e., the protectors of the VPN group are configured to add or 
subtract members form the virtual private network group. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Niketa I. Patel whose telephone number is (571) 272 
4156. The examiner can normally be reached on M-F 8:00 A.M. to 5:00 P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Alford Kindred can be reached on (571) 272 4037. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. 
Should you have questions on access to the Private PAIR system, contact the 
Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like 
assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272- 
1000. 




Niketa Patel 
Patent Examiner 
11/8/2007 



